Lucene search

K
wpvulndbWpvulndbWPVDB-ID:C36DA1BE-822B-4822-91A4-36786B1A0650
HistoryMar 22, 2024 - 12:00 a.m.

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.23 - Sensitive Information Exposure

2024-03-2200:00:00
wpscan.com
10
form maker
10web
sensitive information exposure
wordpress
user signatures

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

Description The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.15.22 via the signature functionality. This makes it possible for unauthenticated attackers to extract sensitive data including user signatures.

CPENameOperatorVersion
eq1.15.23

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

Related for WPVDB-ID:C36DA1BE-822B-4822-91A4-36786B1A0650